All Apps and Add-ons

Wordcloud Custom Visualization : Stanza errors

Lucas_K
Motivator

This app seems to add lots of invalid stanzas to all user configurations.

ie. Invalid key in stanza [blah] in /opt/splunk/etc/apps/blah/local/savedsearches.conf, line 953: display.visualizations.custom.wordcloud_app.wordcloud.useColors (value: 1).
Invalid key in stanza [blah] in /opt/splunk/etc/apps/blah/local/savedsearches.conf, line 967: display.visualizations.custom.wordcloud_app.wordcloud.splunkTastic (value: 0).
Invalid key in stanza [blah] in /opt/splunk/etc/apps/blah/local/savedsearches.conf, line 968: display.visualizations.custom.wordcloud_app.wordcloud.useColors (value: 1).
Invalid key in stanza [blah] in /opt/splunk/etc/apps/blah/local/savedsearches.conf, line 1051: display.visualizations.custom.wordcloud_app.wordcloud.splunkTastic (value: 0).
Invalid key in stanza [blah] in /opt/splunk/etc/apps/blah/local/savedsearches.conf, line 1052: display.visualizations.custom.wordcloud_app.wordcloud.useColors (value: 1).

There are thousands of these invalid stanzas as it infects every user and every app.

lqiao2
Path Finder

Hey, I had the same issue and followed @SK8 's suggestion. It works. Here is what I did:
1. created /opt/splunk/etc/apps/wordcloud_app/README/savedsearches.conf.spec
2. entered below contents:
[]
display.visualizations.custom.wordcloud_app.wordcloud.useColors =
display.visualizations.custom.wordcloud_app.wordcloud.alignmentMode =
display.visualizations.custom.wordcloud_app.wordcloud.backgroundColor =
display.visualizations.custom.wordcloud_app.wordcloud.colorBy =
display.visualizations.custom.wordcloud_app.wordcloud.colorMode =
display.visualizations.custom.wordcloud_app.wordcloud.numOfBins =
display.visualizations.custom.wordcloud_app.wordcloud.minColor =
display.visualizations.custom.wordcloud_app.wordcloud.maxColor =
display.visualizations.custom.wordcloud_app.wordcloud.splunkTastic =
3. restart splunk

0 Karma

DalJeanis
Legend

@Lucas K - has this issue been resolved? (Also, have you notices @SK8's suggestion?)

0 Karma

Lucas_K
Motivator

We had to uninstall the app long prior to that answer.

0 Karma

niketn
Legend

@Lucas K , did you refer to the Tag Cloud examples in Splunk 6.x Dashboard Examples App? Are you using Tag Cloud visualization at all? If you are what is the alternative you used?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

SK8
Explorer

The app miss the README/savedsearches.conf.spec file.
- add the "README" directory in the main directory of the app ($SPLUNK_HOME$/etc/apps/wordcloud_app/README)
- add file savedsearches.conf.spec with following contens:

Declare properties here

display.visualizations.custom.wordcloud_app.wordcloud.useColors =
display.visualizations.custom.wordcloud_app.wordcloud.alignmentMode =
display.visualizations.custom.wordcloud_app.wordcloud.backgroundColor =
display.visualizations.custom.wordcloud_app.wordcloud.colorBy =
display.visualizations.custom.wordcloud_app.wordcloud.colorMode =
display.visualizations.custom.wordcloud_app.wordcloud.numOfBins =
display.visualizations.custom.wordcloud_app.wordcloud.minColor =
display.visualizations.custom.wordcloud_app.wordcloud.maxColor =
display.visualizations.custom.wordcloud_app.wordcloud.splunkTastic =

  • restart splunk
0 Karma

Lucas_K
Motivator

so nothing?

I'll have to uninstall as this app as it still throws thousands of errors making troubleshooting startup impossible.

0 Karma

niketn
Legend

@Lucas K, have you checked out Tag Cloud examples in Splunk 6.x Dashboard Examples App?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Splunk Enterprise Security: An Automated Phishing Response Workflow

Originally posted on Splunk.com.   Key takeaways  The volume of phishing emails can overwhelm even the most ...

Sharper ES Detections, Agentic AI Integrations, Smarter Workload Management, and More ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...

Data Outage Monitoring and Reporting

We’ve all been there, right? Living our best life, working on our Splunk environment, when out of nowhere a ...